CVEs published in July 2024
3,166 vulnerabilities, 289 critical, 12 exploited.
github.com/jackc/pgx/v5GoPanic in Pipeline when PgConn is busy or closed in github.com/jackc/pgx5.3 Medium- github.com/rs/corsDenial of service via malicious preflight requests in github.com/rs/cors7.5 High
podofoopenSUSESecurity update for podofoNo scoreglibc-docTuxCare,glibc-sourceTuxCare,libc6TuxCare +12 more +14 moreUpdate of alt-phpNo score- mongodb rust driverAdversarial unsanitized input may cause MongoDB Rust Driver to issue unintended commands.6.4 Medium
- mongodb libbsonMongoDB C Driver bson_strfreev may be susceptible to integer overflow4.0 Medium
- aimeos ai-admin-graphqlaimeos/ai-admin-graphql improper access control vulnerability allows an editor to modify admin account7.1 High
- delinea centrify pas, privileged access service +1 moreArbitrary Directory Listing in Centrify PAS5.0 Medium
- rackRack ReDoS Vulnerability in HTTP Accept Headers Parsing6.5 Medium
- delinea centrify pas, privileged access service +1 moreArbitrary File Reading in Centrify PAS7.7 High
- akana, akana api platform +1 moreBroken SAML Validation8.6 High
- openstack cinder, glance, nova +2 moreOpenStack Cinder, Glance, and Nova vulnerable to arbitrary file access6.5 Medium
- parisneo lollms-webui, parisneo/lollms-webui, lollms web ui +2 moreRemote Code Execution in parisneo/lollms-webui8.4 High
- johnson controls american dynamics illustra essentials gen 4, johnsoncontrols illustra essential gen 4 firmware +1 moreAmerican Dynamics Illustra Essentials Gen 4 - Reversible User Credential - stored web interface6.8 Medium
- johnson controls american dynamics illustra essentials gen 4, johnsoncontrols illustra essential gen 4 firmware +1 moreAmerican Dynamics Illustra Essentials Gen 4 - Linux Credential Leak6.8 Medium
- johnson controls american dynamics illustra essentials gen 4, johnsoncontrols illustra essential gen 4 firmware +1 moreAmerican Dynamics Illustra Essentials Gen 4 - Reversible User Credential - Linux6.8 Medium
- yt-dlp, ytdl-org youtube-dl +1 moreyt-dlp and youtube-dl vulnerable to file system modification and RCE through improper file-extension sanitization7.8 High
- adobe acrobat, acrobat for edge +1 moreT5 Acrobat Vulnerability - Exploitable crash in DecodeTile7.8 High
- geotoolsGeoTools Remote Code Execution (RCE) vulnerability in evaluating XPath expressions9.8 Critical
- johnson controls american dynamics illustra essentials gen 4, johnsoncontrols illustra essential gen 4 firmware +1 moreAmerican Dynamics Illustra Essentials Gen 4 - Log Filter Input Validation9.1 Critical
- No product listedORIPA LoaderXML.java deserialization5.3 Medium
- gandhihitesh9 post meta data managerPost Meta Data Manager <= 1.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- thimpress learnpress, learnpress – wordpress lms plugin for create and sell online courses +1 moreLearnPress – WordPress LMS Plugin <= 4.2.6.8.1 - Unauthenticated Bypass to User Registration5.3 Medium
- thimpress learnpress, learnpress – wordpress lms plugin for create and sell online courses +1 moreLearnPress – WordPress LMS Plugin <= 4.2.6.8.1 - Missing Authorization to Unauthenticated User Registration Bypass5.3 Medium
- dotcamp ultimate blocks, ultimateblocks ultimate blocks – 25+ gutenberg blocks for block editor +1 moreUltimate Blocks – WordPress Blocks Plugin <= 3.1.9 - Authenticated(Contributor+) Stored Cross-Site Scripting via Multiple Blocks6.4 Medium
- home owners collection management system project owners collection management system, sourcecodester home owners collection management system +1 moreSourceCodester Home Owners Collection Management System sql injection5.3 Medium
- home owners collection management system project owners collection management system, sourcecodester home owners collection management system +1 moreSourceCodester Home Owners Collection Management System unrestricted upload5.3 Medium
- hitout carsaleHitout Carsale OrderController.java sql injection5.3 Medium
- stylemix cost calculator builderCost Calculator Builder <= 3.2.12 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Content Creation4.3 Medium
- stylemix cost calculator builderCost Calculator Builder <= 3.2.12 - Authenticated (Administrator+) Stored Cross-Site Scripting4.4 Medium
- samsung mobile galaxystore, samsung galaxy store +1 moreImproper verification of intent by broadcast receiver vulnerability in GalaxyStore prior to...5.9 Medium
- samsung flowImproper verification of intent by broadcast receiver vulnerability in Samsung Flow prior to...4.4 Medium
- samsung tipsImproper input validation in Tips prior to version 6.2.9.4 in Android 14 allows local attacker to...4.0 Medium
- samsung healthImproper input validation in Samsung Health prior to version 6.27.0.113 allows local attackers to...4.4 Medium
- samsung smartthingsImproper authentication in SmartThings prior to version 1.8.17 allows remote attackers to bypass...5.9 Medium
- samsung android, samsung mobile devices +1 moreImproper access control in clickAdapterItem of SystemUI prior to SMR Jul-2024 Release 1 allows...7.8 High
- samsung android, samsung mobile devices +1 moreExposure of sensitive information in proc file system prior to SMR Jul-2024 Release 1 allows...5.5 Medium
- samsung android, samsung mobile devices +1 moreImproper input validation in parsing and distributing RTCP packet in librtp.so prior to SMR Jul...7.5 High
- samsung android, samsung mobile devices +1 moreImproper input validation in parsing RTCP SDES packet in librtp.so prior to SMR Jul-2024 Release...5.3 Medium
- samsung android, samsung mobile devices +1 moreImproper input validation in parsing an item data from RTCP SDES packet in librtp.so prior to SMR...5.3 Medium
- samsung android, samsung mobile devices +1 moreImproper input validation?in parsing an item type from RTCP SDES packet in librtp.so prior to SMR...5.3 Medium
- samsung android, samsung mobile devices +1 moreImproper input validation in parsing RTCP RR packet in librtp.so prior to SMR Jul-2024 Release 1...5.3 Medium
- samsung android, samsung mobile devices +1 moreImproper input validation?in parsing RTCP SR packet in librtp.so prior to SMR Jul-2024 Release 1...5.3 Medium
- samsung android, mobile devices, samsung mobile devices +2 moreImproper input validation in parsing application information from RTCP packet in librtp.so prior...7.5 High
- samsung android, samsung mobile devices +1 moreImproper access control in KnoxCustomManagerService prior to SMR Jul-2024 Release 1 allows local...5.9 Medium
- samsung android, samsung mobile devices +1 moreImproper access control in launchApp of SystemUI prior to SMR Jul-2024 Release 1 allows local...7.8 High
- samsung android, samsung mobile devices +1 moreImproper access control in system property prior to SMR Jul-2024 Release 1 allows local attackers...4.0 Medium
- samsung android, samsung mobile devices +1 moreImproper input validation in copying data to buffer cache in libsaped prior to SMR Jul-2024...5.9 Medium
- samsung android, samsung mobile devices +1 moreImproper authentication in MTP application prior to SMR Jul-2024 Release 1 allows local attackers...4.0 Medium
- samsung android, samsung mobile devices +1 moreUse of implicit intent for sensitive communication in RCS function in IMS service prior to SMR...4.0 Medium
- Show moreLoading…